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(54) FILE MANAGING SYSTEM, FILE MANAGING DEVICE, FILE MANAGING METHOD, AND 
PROGRAM RECORDING MEDIUM 

(57) In the conventional file management system, 
there is a problem that even a file assigned permission 
information can be processed without considering any 
permission information. Therefore, the system includes 
a first accumulation device 2 for accumulating files to 
which permission information is added, and a new file 
management apparatus 7 for performing an input/out- 
put process on files with a request for a process from 
the application A 10 accessing the file management 
system taken into account according to the permission 
information added to the file. The new file management 
apparatus 7 compares the permission information 
added to the file in the first accumulation device 2 with 
the request contents of the process for the file from the 
application A 1 0, determines whether or not the process 
can be performed on the file, inputs the file from the first 
accumulation device 2 based on the result, and outputs 
it to the application A 10. 
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Description 

Technical Field 

[0001] The present invention relates to a file man- 
agement system, a file management apparatus, and a 
file management method for managing files accumu- 
lated in a hard disk, etc. of a personal computer; a pro- 
gram storage medium storing a program of an 
application for use in a file management system; and a 
program storage medium storing a program for allowing 
a computer to perform each function of a file manage- 
ment apparatus. 

Background Art 

[0002] Conventionally, the contents of files accumu- 
lated in a hard disk of a personal computer can be dis- 
played on a display unit, and the files can be copied to a 
floppy disk of another disk drive. Described below is a 
system including a personal computer and a file accu- 
mulation device. 

[0003] Figure 16 is a block diagram of a display 
connected to the conventional file management system, 
an application for access to the system, and a display 
connected to the system. Figures 17 and 18 are flow- 
charts of the operations of the conventional file man- 
agement apparatus in a conventional file management 
system, and the operation of an application. 
[0004] Before explaining the operation of the con- 
ventional system and application, the predetermined 
condition is described below. The predetermined condi- 
tion is that a third accumulation device 4 has already 
accumulated three files, that is, files L, M, and N. Each 
of the files L, M, and N is designed to include the infor- 
mation about an access right and the data of the con- 
tents of each file as shown in Figure 1 6. An access right 
refers to a right of a user to read a target file from, or 
write the target file to a conventional file management 
apparatus 8. When there are a plurality of users, the 
information about an access right is set for each of the 
users. However, for convenience of explanation, it is 
assumed that there is one user, that an access right to 
the files L and N is assigned to the user 'Exlsting(YES)', 
and that an access right to the file M is not assigned to 
the user 'Not existing(NO)'. The data of the contents of, 
for example, the files M and N, can contain permission 
information indicating whether or not displaying the con- 
tents on a display 9 and copying the contents to a fourth 
accumulation device 5 are permissible. In addition, the 
data of the contents are encrypted. An application E 38 
is a program having the function of displaying the con- 
tents of the files on the display 9. An application F 39 is 
a program having the function of copying the files accu- 
mulated in the third accumulation device 4 to the fourth 
accumulation device 5. 

[0005] Under the above described condition, the 
user is assumed to start the conventional system and 



2 

application E 38 First, the user inputs the name and the 
password of the user to the conventional file manage- 
ment apparatus 8 of a personal computer 37 using the 
keyboard connected to the personal computer 37. The 

5 keyboard is not shown in Figure 16. Then, the conven- 
tional file management apparatus 8 confirms the name 
and the password of the user. If the name and the pass- 
word have preliminarily been registered, then the user is 
authenticated (step 1 shown in Figure 17). On the other 

jo hand, if the user name and/or password has not prelim- 
inarily been registered, then the user is judged to be not 
authenticated, thereby terminating the process (step 1 
shown in Figure 17). For convenience of explanation, it 
is assumed that the user has been authenticated. 

<5 [0006] Then, the user instructs the application E 38 
through the keyboard to request the conventional file 
management apparatus 8 to display on the display 9 the 
contents of any of the files accumulated in the third 
accumulation device 4. In this example, for convenience 

20 of explanation, it is assumed that an instruction to dis- 
play the contents of the file N on the display 9 has been 
issued. The application E 38 issues an access request 
to the conventional file management apparatus 8 
through an interface 6 (step 1 1 shown in Figure 1 7). The 

25 conventional file management apparatus 8 receives the 
access request (step 2 shown In Figure 1 7), reads the 
information about the access right to the file N of the 
third accumulation device 4 (step 3 shown in Figure 1 7), 
and confirms the existence of the access right (step 4 

30 shown in Figure 17). As described above, since the 
information about the access right to the file N indicates 
'Existing(YES)', that is, since the permission information 
that the user has the right to read and write the file N 
from and to the conventional file management appara- 

35 tus 8 in the system is assigned to the file N, the conven- 
tional file management apparatus 8 reads the file N and 
passes it to the application E 38 through the interface 6 
(step 5 shown in Figure 17). If a target file is not the file 
N, but the file M. then access right information indicates 

40 'Not existing(NO).' Therefore, the conventional file man- 
agement apparatus 8 does not read the file M (step 4 
shown in Figure 1 7). 

[0007] Then, the application E 38 reads the file N 
from the conventional file management apparatus 8 

45 (step 12 shown in Figure 17), further reads the permis- 
sion information about the display of the file N, and con- 
firms whether or not the permission information 
matches the request of the application E 38 to display 
the contents of the file N on the display 9 (step 13 

50 shown in Figure 17). Since the permission information 
about the display of the file N is 'Permissible' as shown 
in Figure 16, that is, since the contents of the file N is 
permitted to be displayed on the display 9, the applica- 
tion E 38 decodes the encrypted data of the contents of 

55 the file N (step 14 shown in Figure 1 7), and displays the 
result on the display 9 (step 15 shown in Figure 17). 
However, if the permission information about the display 
of the file N is 'Impermissible,' then the application E 38 
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does not decode the encrypted data of the file N, or die- 
play the data on the display 9 (step 13 shown in Figure 

1 7) . In addition, when the target file is not the file N, but 
the file L, the file L does not contain the permission 
information. Therefore, the application E 38 decodes 
the encrypted data of the file L, and displays the result 
on the display 9 (steps 14 and 15 shown in Figure 17), 
or does not decode the encrypted data or display the 
contents on the display 9. 

[0008] Described below is the case in which the 
user uses the application F 39. In this case, for conven- 
ience of explanation, it is assumed that the user issues 
an instruction to copy the file N accumulated in the third 
accumulation device 4 to the fourth accumulation device 
5. 

[0009] Also in this case, the steps of the application 
F 39 up to the step of inputting and reading the file N 
(step 22 shown in Figure 1 8) are the same as the steps 
of the application E 38 up to the step 12 shown in Figure 
17. In the subsequent steps, the application F 39 copies 
the file N to the fourth accumulation device 5 through 
the interface 6 and the conventional file management 
apparatus 8 without confirming the permission informa- 
tion about copying the file N (step 23 shown in Figure 

18) . 

[0010] If the target file is not the file N, but the file L, 
then the file L is copied to the, fourth accumulation 
device 5 as In the case of the file N (step 23 shown in 
Figure 1 8). On the other hand, when the target file is the 
file M, the access right information about the file M is 
'Not existing(NO).' Therefore, as in the case of the appli- 
cation E 38, the application F 39 does not receive the 
file M from the conventional file management apparatus 
8. 

[0011] Thus, when the application E 38 is used in 
the conventional file management system, a process is 
performed with the permission information assigned to 
a file taken into account. On the other hand, when the 
application F 39 is used, a copying process is per- 
formed without taking the permission information 
assigned to a file into account. 
[0012] Therefore, conventionally, a file assigned the 
permission information, that is, even a file whose copy- 
right should be protected can be displayed, copied, etc. 
That is, a file assigned the permission information can 
be illegally used. 

[0013] In addition, when a file is not controlled in 
various processes such as the displaying, copying, 
moving, backup, and/or processing, etc., the read file is 
permitted to be copied, etc. As a result, a file cannot be 
protected against illegal access with convenience. 

Disclosure of the Invention 

[0014] As described above, the present invention 
aims at providing a file management apparatus, a file 
management system including the file management 
apparatus, and a file management method for process- 



ing a file assigned permission information taken into 
account while, in the conventional file management sys- 
tem, there is the problem that a file assigned the permis- 
sion information can be processed without 
5 consideration of the permission information. 

[0015] Furthermore, the present invention also 
aims at providing a file management apparatus, a file 
management system including the file management 
apparatus, and a file management method for prevent- 
to ing a file whose author has the copyright, and whose 
copyright should be protected from being displayed, 
copied, moved, backup, and/or processed without per- 
mission of the author. 

[0016] In addition, the present invention aims at 
is providing a file management apparatus, a file manage- 
ment system including the file management apparatus, 
and a file management method for controlling the proc- 
esses of displaying, copying, moving, backingup, and/or 
processing a file, and preventing illegal access with con- 
20 venience of a file. 

[0017] The 1 s ' invention of the present invention 
(corresponding to claim 1)is a file management system, 
comprising: 

25 an accumulation device accumulating a file to which 
information about process restriction on the file is 
added; and 

a file management apparatus performing an 
input/output process on the file, in consideration of 
so a request for a process from an application access- 
ing said file management system and, according to 
the information about process restriction added to 
the file, characterized in that 
said file management apparatus compares the 
35 information about process restriction added to the 

file in said accumulation device with request con- 
tents of a process on the file from said application, 
determines whether or not the process should be 
performed on the file, inputs the file from said accu- 
se mutation device based on the result, and outputs 
the file to the application. 

[0018] The 2 nd invention of the present invention 
(corresponding to claim 2) is the file management sys- 
45 tern according to the 1 st invention, characterized in that: 

said file management apparatus and said applica- 
tion comprise authentication units; 
one of the authentication units performs an authen- 
50 tication process with another authentication unit; 

said authentication unit of said file management 
apparatus checks whether or not said application is 
authenticated; 

when the application is authenticated as a result of- 
55 the authentication process, said file management 
apparatus determines whether or not application 
can process the file; and 

when the application is not authenticated as a result 
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of the authentication process, said file management 
apparatus does not accept the request to process 
the file from the application. 

[0019] The 3rd invention of the present invention 
(corresponding to claim 3) is the file management sys- 
tem according to the 1 81 invention, characterized in that: 

said file management apparatus and said applica- 
tion comprise authentication units; 
one of the authentication units performs an authen- 
tication process with another authentication unit; 
said authentication unit of said file management 
apparatus checks whether or not said application is 
authenticated; 

when the application is authenticated as a result of 
the authentication process, said file management 
apparatus determines whether or not application 
can process the file; and 

when the application is not authenticated as a result 
of the authentication process, said file management 
apparatus reads all or a part of the information 
about process restriction added to the file in said 
accumulation device, and determines whether or 
not the application can process the file according to 
the read information. 

[0020] The 4 th invention of the present invention 
(corresponding to claim 13) is a program storage 
medium storing a program of an application used in the 
file management system according to the present 
invention. 

[0021] The 5 lh invention of the present invention 
(corresponding to claim 14) is a file management appa- 
ratus, characterized by comprising: 

a comparison unit comparing information about 
process restriction on a file in an accumulation 
device connected to the file management appara- 
tus with request contents of a process on the file 
from the application accessing the file management 
apparatus; and 

an input/output unit determining whether or not the 
file can be processed based on a comparison result 
of said comparison unit, and inputting the file from 
said accumulation device and outputting the file to 
the application based on the result. 

[0022] The 6 lh invention of the present invention 
(corresponding to claim 15) is the file management 
apparatus according to the 5 lh invention, characterized 



said file management apparatus comprises an 
authentication unit; 

said authentication unit and an authentication unit 
of the application perform an authentication proc- 
ess with each other; 



said authentication unit ot the file management 
apparatus checks whether or not the application 
can be authenticated; 

when the application is authenticated as a result of 
s the authentication process, said comparison unit 

performs the comparison process, and said 
input/output unit determines whether or not the 
application can process the file ; and 
when the application is not authenticated as a result 
10 of the authentication process, said comparison unit 
does not accept the request to process the file from 
the application, and does not perform the compari- 
son process. 

is [0023] The 7 th invention of the present invention 
(corresponding to claim 16) is the file management 
apparatus according to the 5 th invention, characterized 
in that: 

20 said file management apparatus comprises an 
authentication unit; 

said authentication unit and an authentication unit 
of the application perform an authentication proc- 
25 ess with each other; 

said authentication unit of the file management 
apparatus checks whether or not the application 
can be authenticated; 

30 

when the application is authenticated as a result of 
the authentication process, said comparison unit 
performs the comparison process, and said 
input/output unit determines whether or not the 
35 application can process the file ; and 

when the application is not authenticated as a result 
of the authentication process, said comparison unit 
reads all or a part of the information about process 
w restriction added to the file in said accumulation 
device, and said input/output unit determines 
whether or not the application can process the file 
according to the read information. 

45 [0024] The 8 ,h invention of the present invention 
(corresponding to claim 26) is a program storage 
medium, characterized by storing a program for direct- 
ing a computer to perform all or a part of each function 
of each component of the file management apparatus 

so according to the present invention. 

[0025] The 9 ,h invention of the present invention 
(corresponding to claim 27) is a file management sys- 
tem, comprising plural sets of: 

55 an accumulation device accumulating a file to which 
information about process restriction on the file is 
added; and 

a file management apparatus performing an 
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input/output process on the file in consideration of a 
request for a process from an application accessing 
said file management system according to the infor- 
mation about process restriction added to the file, 
characterized in that, 

said file management apparatus encrypts and adds 
to the file in a corresponding accumulation device a 
non-rewritable identification value specific to the 
accumulation device for specifying the correspond- 
ing accumulation device, and reads only the file to 
which the identification value of the corresponding 
accumulation device is added. 

[0026] The 1 0 th invention of the present invention 
(corresponding to claim 28) is a file management sys- 
tem, comprising: 

a plurality of accumulation devices accumulating a 
file to which information about process restriction 
on the file is added; and 

a file management apparatus performing an 
input/output process on the file in consideration of a 
request for a process from an application accessing 
said file management system according to the infor- 
mation about process restriction added to the file, 
characterized in that 

said file management apparatus encrypts and adds 
to the file accumulated in each of the plurality of 
accumulation devices a non-rewritable identifica- 
tion value specific to the accumulation device for 
specifying a corresponding accumulation device, 
and reads only the file accumulated in an accumu- 
lation device corresponding to an added identifica- 
tion value. 

[0027] The 11 th invention of the present invention 
(corresponding to claim 29) is a file management appa- 
ratus, characterized in that to a file in an accumulation 
device connected to the file management apparatus, a 
non-rewritable identification value specific to the accu- 
mulation device for specifying the accumulation device 
is encrypted and added, and only the file to which the 
identification value of the accumulation device is added 
is read. 

[0028] The 12 th invention of the present invention 
(corresponding to claim 30) is a file management appa- 
ratus, characterized in that to a file accumulated in each 
of a plurality of accumulation devices connected to the 
file management apparatus, a non -rewritable identifica- 
tion value specific to the accumulation device for speci- 
fying the corresponding accumulation device is 
encrypted and added, and only the file accumulated in 
the accumulation device corresponding to an added 
identification value is read. 

[0029] The 1 3 ,h invention of the present invention 
(corresponding to claim 31) is a program storage 
medium storing a program for directing a computer to 
perform all or a part of each function of the file manage- 



B 

ment apparatus according to the 11* or 12 th inventions. 
[0030] The 14 th invention of the present invention 
(corresponding to claim 32) is a file management 
method, characterized by comprising the steps of: 

comparing information about process restriction on 
a file in an accumulation device accumulating the 
file to which the Information about process restric- 
tion on the file is added with request contents of a 
io process of the file from an application accessing the 
file management system; 

determining whether or not the process can be per- 
formed on the file based on the comparison; and 
inputting the file from said accumulation device 
is based on the result, and outputting the file to the 
application. 

[0031] The 15" 1 invention of the present invention 
(corresponding to claim 33) is a file management 
20 method, characterized by the steps of: 

encrypting and adding a non-rewritable identifica- 
tion value specific to an accumulation device for 
specifying the accumulation device to a file in the 
25 accumulation device accumulating files; and 

reading only the file to which the identification value 
of said accumulation device is added. 

[0032] The 16 th invention of the present invention 
30 (corresponding to claim 34) is a file management 
method, characterized by comprising the steps of: 

encrypting and adding a non-rewritable identifica- 
tion value specific to an accumulation device for 

35 specifying the accumulation device corresponding 
to a file accumulated in each of a plurality of accu- 
mulation devices accumulating files; and 
reading only the file accumulated in an accumula- 
tion device corresponding to an added identification 

40 value. 

Brief Description of the Drawings 
[0033] 

45 

Figure 1 is a block diagram of the file management 
system according to a first embodiment of the 
present invention; 

Figure 2 is a block diagram showing each compo- 
50 nent of a new file management apparatus in the file 
management system according to the first embodi- 
ment of the present invention; 
Figure 3 is a flowchart of the operations of a new file 
management apparatus and the operations of an 
55 application of the file management system accord- 
ing to the first embodiment of the present invention; 
Figure 4 is a flowchart of the operations of a new file 
management apparatus and the operations of an 
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application A of the file management system 
according to a second embodiment of the present 
invention; 

Figure 5 is a flowchart of the operations of a new file 
management apparatus and the operations of an s 
application B of the file management system 
according to the second embodiment of the present 
invention; 

Figure 6 shows all files accumulated in the first 
accumulation device of the file management sys- »o 
tern according to a third embodiment of the present 
invention; 

Figure 7 is a block diagram of the file management 
system according to a fourth embodiment of the 
present invention; 's 
Figure 8 is a flowchart of the operations of a new file 
management apparatus and the operations of an 
application of the file management system accord- 
ing to the fourth embodiment of the present inven- 
tion; 20 
Figure 9 is a block diagram, other than the block 
diagram shown In Figure 7, of the file management 
system according to the fourth embodiment of the 
present invention; 

Figure 1 0 is a flowchart, other than the flowchart 2s 
shown in Figure 8, of the operations of a new file 
management apparatus and the operations of an 
application of the file management system accord- 
ing to the fourth embodiment of the present inven- 
tion; 30 
Figure 1 1 is a block diagram of the file management 
system according to a fifth embodiment of the 
present invention; 

Figure 12 is a block diagram, other than the block 
diagram shown in Figure 1 1 , of the file manage- 35 
ment system according to the fifth embodiment of 
the present invention; 

Figure 13 is a block diagram of the file management 
system according to a sixth embodiment of the 
present invention; "o 
Figure 1 4 is a flowchart of the operations of a file 
management apparatus and the operations of an 
application of the file management system accord- 
ing to the sixth embodiment of the present inven- 
tion; 45 
Figure 15 is a block diagram, other than the block 
diagram shown in Figure 13, of the file manage- 
ment system according to the sixth embodiment of 
the present invention; 

Figure 1 6 is a block diagram of the conventional file so 
management system; 

Figure 1 7 is a first flowchart of the operations of the 
file management apparatus and the operations of 
the application of the conventional file management 
system; and 55 
Figure 1 8 is a second flowchart of the operations of 
the file management apparatus and the operations 
of the application of the conventional file manage- 



ment system. 
(Description of Symbols) 
[0034] 

1 Personal computer 

2 First accumulation device 

3 Second accumulation device 

4 Third accumulation device 

5 Fourth accumulation device 

6 Interface 

7 New file management apparatus 

8 Conventional file management apparatus 

9 Display 

1 0 Application A 

1 1 Application B 

12 Authentication unit 

13 Comparison unit 

14 Input/output unit 

15 Personal computer 

16 Modem device 

1 7 New file management apparatus 

18 Accounting unit 

1 9 Service provider accounting server 

20 Personal computer 

21 New file management apparatus 

22 Accounting software 

23 Personal computer 

24 New file management apparatus 

25 Determination unit 

26 Application C 

27 Personal computer 

28 New file management apparatus 

29 Determination software 

30 Personal computer 

31 Interface 

32 First file management apparatus 

33 Second file management apparatus 

34 Application D 

35 Personal computer 

36 Third file management apparatus 

37 Personal computer 

38 Application E 

39 Application F 

Best Mode for Carrying Out the invention 

[0035] The embodiments of the present invention 
will be described below by referring to the attached 
drawings. 

(First Embodiment) 

[0036] Described is the configuration of the file 
management system according to a first embodiment of 
the present invention. 

[0037] Figure 1 is a block diagram of the file man- 
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agement system according to the first embodiment of 
the present invention. The file management system 
according to the first embodiment comprises a personal 
computer 1 , a first accumulation device 2, a second 
accumulation device 3, the third accumulation device 4, 5 
and the fourth accumulation device 5. The personal 
computer 1 comprises the interface 6, a new file man- 
agement apparatus 7, and the conventional file man- 
agement apparatus 8. The personal computer 1 is 
connected to the display 9, and Figure 1 also shows the w 
display 9. In addition, Figure 1 shows an application A 
10 and an application B 11 for use in the first embodi- 
ment. 

[0038] Described below is each component means 
of the personal computer 1 . is 
[0039] The interface 6 is means for interfacing a file, 
etc. between the new file management apparatus 7 and 
the application A 10. In addition, the interface 6 is also 
means for interfacing a file, etc. between the conven- 
tional file management apparatus 8 and the application 20 
B 11. 

[0040] The new file management apparatus 7 
inputs the information about access rights to files accu- 
mulated in the first accumulation device 2, the informa- 
tion about processing a file, and files from the first 25 
accumulation device 2, inputs the request information 
from the application A 10 through the interface 6, and 
performs an input/output process on files. In the 
descriptions below, the information about the above 
described processes is referred to as 'permission infor- 30 
mation.' The request information from the application A 
10 is described later when the operations of the file 
management system according to the first embodiment 
of the present invention are described. AS shown in Fig- 
ure 2, the new file management apparatus 7 comprises 35 
an authentication unit 12, a comparison unit 13, and an 
input/output unit 14 The authentication unit 12, the 
comparison unit 13, and the input/output unit 14 are 
also described later when the operations of the file man- 
agement system according to the first embodiment are 40 
described. 

[0041] The conventional file management appara- 
tus 8 is the same as the apparatus described in the 
'Background Art.' That is, the conventional file manage- 
ment apparatus 8 inputs the information about the 45 
access rights to the files accumulated in the third accu- 
mulation device 4, the permission information, and the 
files from the third accumulation device 4, inputs the 
access request from the application B 1 1 through the 
interface 6, and performs the file input/output process. sc 
[0042] Described below are the first accumulation 
device 2, the second accumulation device 3, the third 
accumulation device 4, the fourth accumulation device 
5, the display 9, the application A 1 0, and the applica- 
tion B 1 1 in this order. 55 
[0043] The first accumulation device 2, the second 
accumulation device 3, the third accumulation device 4, 
and the fourth accumulation device 5 are devices for 



accumulating files. 

[0044] The first accumulation device 2 has already 
accumulated two files A and B, and each of the files A 
and B is assumed to comprise access right information, 
permission information, and contents data as shown in 
Figure 1. An access right refers to what has been 
described in 'Background Art,' and indicates a right for a 
user to make the new file management apparatus 7 
read and write a target file. When there are a plurality of 
users, information about the access right is prepared for 
each user. For convenience of explanation, it is 
assumed that there is only one user, and that the infor- 
mation of access right ' existing (YES)' to the files A and 
B is assigned to the user. Permission information refers 
to information specifying whether or not the contents of 
a file are permitted to be displayed on the display 9, cop- 
ied, moved, backed up to the second accumulation 
device 3, or processed. It is assumed that the permis- 
sion information Is prepared independently of the proc- 
esses of display, copy, move, backup, and processing. 
To back up refers to permitting a target file to be copied 
only to the second accumulation device 3, and after the 
copying process, to permitting a target file to be copied 
again only to the first accumulation device 2. Further- 
more, the contents of a file refer to whether the file is a 
picture or sentences or the like. 

[0045] The second accumulation device 3 is 
assumed not to accumulate any file when the file man- 
agement system according to the first embodiment of 
the present invention starts to operate. 
[0046] The third accumulation device 4 is assumed 
to be what has been described in the 'Background Art,' 
and accumulates the files L, M, and N. Since the files L, 
M, and N are described in the 'Background Art,' the 
descriptions are omitted here. 

[0047] Like the second accumulation device 3, the 
fourth accumulation device 5 is assumed not to accu- 
mulate any file when the file management system 
according to the first embodiment of the present inven- 
tion starts to operate. The fourth accumulation device 5 
is what has been described in the 'Background Art.' 
[0048] The display 9 is a unit for displaying the con- 
tents of the files A and B accumulated in the first accu- 
mulation device 2. 

[0049] The application A 1 0 is a program having the 
function of copying the files A and B accumulated in the 
first accumulation device 2 to the second accumulation 
device 3, and having the function of an authentication 
unit. In addition, the application A 10 observes the per- 
mission information about the files A and B, and is an 
authenticated application corresponding to the new file 
management apparatus 7. 

[0050] The application B 11 is a program having the 
function of copying the files L, M, and N accumulated in 
the third accumulation device 4 to the fourth accumula- 
tion device 5, and having the function of an authentica- 
tion unit. However, the application B 11 does not 
observe the permission information about the files A 
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and B, and is an illegal application not corresponding to 
the new file management apparatus 7. 
[0051 ] The first accumulation device 2 is used as an 
accumulation unit, and the new file management appa 
ratus 7 is used as a file management apparatus accord- 
ing to claim 1 of the present invention. A program 
storage medium storing the program of the application 
A 1 0 is used as a program storage medium according to 
claim 13 of the present invention. In addition, the new 
file management apparatus 7 is used as a file manage- 
ment apparatus according to claim 14 of the present 
invention. Furthermore, a process not requiring storing 
a file in a data storage medium accessing the present 
file management system according to claims 6 and 1 9 
indicates displaying the contents of the files on the dis- 
play 9. 

[0052] Described below is the operation of the file 
management system according to the first embodiment 
of the present invention. 

[0053] First, the case in which the user uses the file 
management system and the application A 10 accord- 
ing to the first embodiment of the present invention is 
described below by referring to Figure 3. Figure 3 is a 
flowchart of the operation of the new file management 
apparatus 7, and the operation of the application A 1 0 of 
the file management system. 

[0054] First, the user inputs the name of the user 
and his or her password to the new file management 
apparatus 7 of the personal computer 1 using a key- 
board connected to the personal computer 1 . However, 
the keyboard is not shown in Figure 1. Then, the new file 
management apparatus 7 confirms the name and the 
password of the user, and determines that the user is 
authenticated if the name and the password of the user 
have already registered (step 1 shown in Figure 3). On 
the other hand, if the name and/or the password of the 
user has not yet been registered, it is determined that 
the user is not authenticated, thereby terminating the 
operation (step 1 shown in Figure 3). In this example, for 
convenience of explanation, it is assumed that the user 
has been authenticated. 

[0055] Then, using a keyboard, the user issues to 
the application A 10 an instruction to direct the new file 
management apparatus 7 to request to copy any of the 
files accumulated in the first accumulation device 2 to 
the second accumulation device 3. In this case, for con- 
venience of explanation, it is assumed that an instruc- 
tion to copy the file A to the second accumulation device 
3 is issued. The application A 10 issues an access 
request to the new file management apparatus 7 
through the interface 6 (step 21 shown in Figure 3). The 
access request refers to specifying a file, and request- 
ing to read the file. In this case, it refers to requesting to 
read the file A in the first accumulation device 2. Then, 
the new file management apparatus 7 inputs an access 
request from the application A 10 (step 2 shown in Fig- 
ure 3), the information about the access right of the file 
A of the first accumulation device 2 is read (step 3 
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shown in Figure 3), and the existence of the access 
right is confirmed (step 4 shown in Figure 4). As 
described above, or as shown in Figure 1 , confirm that 
the information about the access right of the file A is 

5 'existing' (YES). 

[0056] Then, the authentication unit 12 provided in 
the new file management apparatus 7 performs an 
authentication process using the function of the authen- 
tication unit of the application A 10 (steps 5 and 22 

io shown in Figure 3). The authentication process is per- 
formed by the authentication unit 12 having the problem 
and the solution to the problem, issuing the problem to 
the application A 10 through the interface 6, by the 
application A 10 answering the problem through the 

is interface 6, and by the authentication unit 1 2 comparing 
the solution with the answer front the application A 1 0. If 
the solution matches the answer, it indicates successful 
authentication, and the authentication unit 12 authenti- 
cates the application A 10. On the other hand, if the 

20 solution does not match the answer, it indicates authen- 
tication failure, and the authentication unit 12 does not 
authenticate the application A 10. As described above, 
the application A 1 0 is an authenticated application cor- 
responding to the new file management apparatus 7, 

25 thereby successfully authenticating the application A 
10. 

[0057] If the application A 10 is authenticated, it 
issues a request to the comparison unit 13 of the new 
file management apparatus 7 through the interface 6 to 

30 copy the file A accumulated in the first accumulation 
device 2 to the second accumulation device 3 (step 23 
shown in Figure 3). The comparison unit 13 provided in 
the new file management apparatus 7 Inputs the 
request (step 6 shown in Figure 3), reads the permis- 

35 sion information about the copy of the file A from the first 
accumulation device 2, and determines whether or not 
the permission information indicates 'Permissible' 
(steps 7 and 8 shown in Figure 3). As shown in Figure 
1 , since the permission information about the copy of 

40 the file A indicates 'Impermissible,' the comparison unit 
1 3 outputs the information that the copy request from 
the application A 1 0 is not acceptable to the application 
A 1 0 through the interface 6 (step B shown in Figure 3). 
The application A 10 inputs the information that the 

45 copy request from the comparison unit 1 3 is not accept- 
able (step 24 shown in Figure 3), and stops copying the 
file A accumulated in first accumulation device 2 to the 
second accumulation device 3. 

[0058] Described below is the case in which a tar- 
50 get file is not the file A, but the file B. This case is the 
same as the case of the file A up to the step of the com- 
parison unit 13 provided in the new file management 
apparatus 7 reading the permission information about 
the copy of the file B from the first accumulation device 
55 2. That is, the operation is the same as the operation up 
to the step 7 shown in Figure 3. 
[0059] Since the permission information about the 
copy of the file B is 'Permissible,' the comparison unit 13 
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first reads the parmission information, and outputs the 
information that a copy request from the application A 

10 is acceptable to the application A 10 through the 
interface 6 (step 8 shown in Figure 3). Then, the 
input/output unit 14 provided in the new file manage- t 
merit apparatus 7 reads the file B from the first accumu- 
lation device 2. and outputs the file B to the application 

A 1 0 through the interface 6 (step 9 shown in Figure 3). 
The application A 1 0 inputs and reads the file B from the 
input/output unit 14 (step 25 shown in Figure 3), and 
copies the file B to the second accumulation device 3 
through the interface 6 and the input/output unit 14 of 
the new file management apparatus 7 (step 26 shown in 
Figure 3). 

[0060] The operation performed when the file man- 
agement system and the application A 1 0 are associ- 
ated has been described above. Described below is the 
operation performed when the file management system 
and the application B 11 are associated. In this case, 
the user Issues an instruction to the application B 1 1 to . 
have the new file management apparatus 7 request to 
copy the file A accumulated in the first accumulation 
device 2 to the second accumulation device 3. 
[0061] In this cage, the authentication unit 12 pro- 
vided in the new file management apparatus 7 performs 
an authentication process using the function of the 
authentication unit of the application B 1 1 (steps 5 and 
22 shown in Figure 3) as described above in the case of 
the application A 10. However, since the application B 

1 1 is an illegal application which does not correspond to 
the new file management apparatus 7, the authentica- 
tion unit 12 authenticates the application B 1 1 as an ille- 
gal application, thereby failing in authentication. Thus, if 
the authentication fails, the new file management appa- 
ratus 7 does not accept any request from the application 
B 11. In addition, a, file to be processed is a file A, but 
the authentication fails although the file to be processed 
is a file B. and the new file management apparatus 7 
does not accept any request from the application B 1 1 . 
[0062] However, when the user issues an instruc- 
tion to the application B 1 1 to have the conventional file 
management apparatus 8 request to copy any file accu- 
mulated in the third accumulation device 4 to the fourth 
accumulation device 5, the operation is the same as the 
operation in the case of the application F 39 described 
in the 'Background Art,' and the explanation is omitted 
here. 

[0063] As described above, unlike the conventional 
file management system, the file management system 
according to the first embodiment of the present inven- 
tion does not copy a file with the permission information 
ignored. 

[0064] In addition, according to the first embodi- 
ment of the present invention, the determination as to 
whether or not the user is authenticated, and the 
authentication process performed between the authen- 
tication unit 12 provided in the new file management 
apparatus 7 and the function of the authentication unit 



of the application A 10 or the application B 1 1 are not 
limited to the above described example. 

(Second Embodiment) 

[0065] Described below are the configuration and 
the operation of the file management system according 
to a second embodiment of the present invention. 
[0066] According to the second embodiment of the 
present invention, when the above described authenti- 
cation according to the first embodiment fails, there is a 
difference from the first embodiment, and the difference 
is described below mainly by referring to Figures 4 and 
5. Figure 4 is a flowchart of the operation of the new file 
management apparatus 7 of the file management sys- 
tem, and the operation of the application A 1 0. Figure 5 
is a flowchart of the operation of the new file manage- 
ment apparatus 7 of the file management system, and 
the operation of the application B 11. The operation of 
the file management system according to the second 
embodiment of the present invention is different from 
the operation of the file management system according 
to the first embodiment of the present invention, but the 
configuration of the file management system is the 
same as the configuration shown in Figure 1 
[0067] First, the operation in the case in which the 
file management system and the application A 10 are 
associated is described by referring to Figure 4. In this 
case, the authentication according to the first embodi- 
ment in steps 5 and 22 shown in Figure 3 indicates a 
successful result. That is, since the authentication in 
steps 5 and 22 shown in Figure 4 is successful, the sub- 
sequent operations are the same as the operations 
according to the first embodiment of the present inven- 

[0068] Next, the operation in the case in which the 
file management system and the application Bit are 
associated is described by referring to Figure 5. In this 
case, the authentication according to the first embodi- 
ment in steps 5 and 22 shown in Figure 3 fails. That is, 
the authentication in steps 5 and 22 shown in Figure 5 
fails. 

[0069] When the authentication fails, the compari- 
son unit 13 provided in the new file management appa- 
ratus 7 not only reads the permission information about 
the copy of the file A from the first accumulation device 
2, but also reads the permission information about the 
display, move, backup, and processing, that is, reads all 
permission information about the file A shown in Figure 
1 , and checks all permission information whether or not 
it indicates 'Permissible' (steps 10 and 11 in Figure 5). 
[0070] Since the permission information about file A 
contains the information 'Impermissible,' the input/out- 
put unit 14 performs no processes. As a result, the 
application B 1 1 cannot input the file A. 
[0071] In the example above, the target file is the 
file A. Described below is the case in which the target 
file is the file B. In this case, the comparison unit 13pro- 
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vided in the new file management apparatus 7 reads all 
permission information about the file B from the first 
accumulation device 2, and checks all permission infor- 
mation whether or not it indicates 'Permissible' (steps 10 
and 1 1 shown in Figure 5). Since all permission infor- 
mation about the file B indicates 'Permissible' as shown 
in Figure 1, the input/output unit 14 determines that the 
file B is an accessible file, reads the file B from the first 
accumulation device 2, and outputs the file B to the 
application B 1 1 through the interface 6 (step 9 in Figure 
5). Then, the application B 11 inputs and reads the file 
B from the input/output unit 14, and copies the file B to 
the second accumulation device 3 through the 
input/output unit 14 (steps 25 and 26 in Figure 5). 
[0072] As described above, unlike the file manage- 
ment system according to the first embodiment of the 
present invention, the file management system accord- 
ing to the second embodiment of the present invention 
outputs any accessible file to an application although 
the application is not authenticated, or although it is Ille- 
gal, that is, although the application fails in authentica- 
tion. Therefore, a manufacturer can freely generate an 
application accessing any accessible file, which is 
greatly convenient. 

(Third Embodiment) 

[0073] Described below are the configuration and 
the operation of the file management system according 
to a third embodiment of the present invention. 
[0074] According to the third embodiment of the 
present invention, when the above described authenti- 
cation according to the second embodiment fails, there 
is a difference from the second embodiment, and the 
difference is described below by referring to Figure 6. 
Figure 6 shows all flies accumulated in the first accumu- 
lation device 2 of the tile management system, and in 
addition to the above described files A and B, files C 
and D are accumulated in the first accumulation device 
2. The permission information about 'copy generation' 
shown in Figure 6 is the information specifying the file 
generation to be copied, and indicates the generation 
number allowed to be copied. For example, the file C is 
assigned the number '3,' and the three generations can 
be copied. However, each time a copy is made, the gen- 
eration number to be copied is reduced by 1. 
[0075] When the file management system and the 
application B 1 1 are associated, the authentication fails 
as described above in the second embodiment. 
[0076] When the authentication fails, the compari- 
son unit 13 provided in the new file management appa- 
ratus 7 does not read the permission information about 
the copy of the file A from the first accumulation device 
2, but reads the permission information about the dis- 
play, move, backup, processing, and a copy generation 
about the file A shown in Figure 6, and checks whether 
or not the permission information about anything but the 
'copy generation' indicates 'Permissible' (steps 10 and 



1 1 in Figure 5), and confirms the number of the permis- 
sion information about the 'copy generation' (step 1 1 
shown in Figure 5). The comparison unit 13 does not 
read the permission information about the copy 

5 because, if the permission information about the 'copy 
generation' is assigned a number other than 0, it indi- 
cates the permission for a copy. However, if the number 
0 is assigned, then it indicates 'Impermissible' copy. In 
addition, no number is assigned to the permission infor- 

jo mation about the 'copy generation,' it indicates 'Permis- 
sible'. 

[0077] Since the permission information about file A 
contains the information 'Impermissible,' the input/out- 
put unit 14 performs no processes. As a result, the 

ts application B 1 1 cannot input the file A. 

[0078] Described below is the case in which the tar- 
get file is the file B. In this case, as shown in Figure 6, 
the permission information about the file B does not 
contain the information about the copy generation. How- 

20 ever, all other permission information indicates 'Permis- 
sible,' and the input/output unit 14 reads the file B from 
the first accumulation device 2. and outputs the file B to 
the application B 11 through the Interface 6 (step 9 
shown in Figure 5). Then, the application B 11 inputs 

25 and reads the file B from the input/output unit 14, and 
copies the file B to the second accumulation device 3 
through the interface 6 and the input/output unit 14 
(steps 25 and 26 shown in Figure 5) 
[0079] Described below is the case in which the tar- 

30 get file is a file C. In this case, as shown in Figure 6, the 
file C contains the permission information that the gen- 
eration up to 3 can be copied. This indicates that the 
copying operation can be performed. At this time, the 
comparison unit 13 does not read the permission infor- 

35 mation about the copy of the file C, reads the permis- 
sion information about anything but the copying 
operation, checks whether or not the permission Infor- 
mation about anything but the 'copy generation' indi- 
cates 'Permissible' (steps 1 0 and 1 1 shown in Figure 5), 

40 and confirms the number of the permission information 
about the 'copy generation' (step 1 1 shown in Figure 5). 
As described above, since the number of the permis- 
sion information of the 'copy generation' is 3, indicating 
the permissibility of copying the file C, and all other per- 

45 mission information indicates 'Permissible,' the 
input/output unit 14 reads the file C from the first accu- 
mulation device 2, and outputs the file C to the applica- 
tion B 1 1 through the interface 6 as in the case of the file 
B (step 9 shown in Figure 5). Then, the application B 1 1 

so inputs and reads the file C from the input/output unit 14, 
and copies the file C to the second accumulation device 
3 through the interface 6 and the input/output unit 14 
(steps 25 and 26 shown in Figure 5). 
[0080] Described below is the case in which the tar- 

55 get file is a file D. In this case, as shown in Figure 6, the 
file D contains the permission information indicating that 
the generation up to 3 can be copied. At this time as 
well, the comparison unit 13 reads the permission infor- 



10 



19 EP 1071 017 A1 



mation about anything but the copying operation, 
checks whether or not the permission information about 
anything but the 'copy generation' indicates 'Permissi- 
ble' (steps 10 and 11 shown in Figure 5), and confirms 
the number of the permission information about the 
'copy generation' (step 1 1 shown in Figure 5). As shown 
in Figure 6, since the information 'Impermissible' is con- 
tained in the permission information of the file D, the 
input/output unit 14 performs no processes. As a result, 
the application B 1 1 cannot input the file 0. 
[0061] In the above described third embodiment, 
each file is assigned the permission information 'copy 
generation.' However, each file can be assigned the per- 
mission information 'copy date,' not 'copy generation,' 
for specification of the date on which a file can be cop- 
ied. In this case, the file assigned the permission infor- 
mation 'copy date' indicates the automatic permission of 
a copying operation. In this case, the operation similar 
to the operation performed on a file containing the per- 
mission information 'copy generation' as described 
above is performed with the 'copy generation' replaced 
with the 'copy date,' and with the 'copy date' indicating 
the date on which the copying operation can be per- 
formed taken into account. 

[0082] In addition, the permission information 'move 
date,' not the above described 'copy date,' can be 
assigned to a file. For such a file, the operation similar to 
the operation performed on a file containing the permis- 
sion information 'copy date' is performed with the 'copy 
date' replaced with the 'move date,' and with the 'move 
date' indicating the date on which the a file can be 
moved taken into account. 

[0083] Furthermore, according to the above 
described first through third embodiments, the applica- 
tion A 1 0 is a program having the function of copying the 
files accumulated in the first accumulation device 2 to 
the second accumulation device 3, but the application A 
10 can be a program having the function of displaying a 
file on the display 9, moving, backing up. and process- 
ing it to the second accumulation device 3. At this time, 
as long as the above described copying operation is 
replaced with the displaying, moving, backing up, or 
processing operation, and the combination of the proc- 
esses and the permission information about a target file 
is considered, the above described first through third 
embodiments can be realized. 

(Fourth Embodiment) 

[0084] Described below is the configuration of the 
file management system according to a fourth embodi- 
ment of the present invention. 
[0085] The file management system according to 
the fourth embodiment comprises, as shown in Figure 
7, the personal computer 15 different from the personal 
computer 1 of the file management system according to 
the first embodiment, the first accumulation device 2, 
the second accumulation device 3, and the modem 



20 

device 16. The personal computer 15 comprises the 
new file management apparatus 17 different from the 
new file management apparatus 7 of the personal com- 
puter 1. The new file management apparatus 17 com- 
5 prises the accounting unit 18 in addition to each 
component unit of the new file management apparatus 

7. The accounting unit 18 is connected to the modem 
device 1 6 and the modem device 1 6 is connected to the 
service provider accounting server 19 through a public 

jo line. In addition, the first accumulation device 2 accumu- 
lates files E, F, and G different from the files A and B. As 
shown in Figure 7, the files E, F, and G contain the 
accounting information for each permission information 
for specifying whether or not the user is charged a pre- 

, 5 determined fee in processing the permission informa- 
tion together with the information about an access right, 
the permission information, and the contents data com- 
posing the files A and B shown In Figure 1 . For example, 
to the tile E, the accounting information is added to 

20 request that the user should be charged the fee of 300 
yen in response to the display on the display 9. 
[0086] Described below is the operation of the file 
management system according to the fourth embodi- 
ment of the present invention. 

25 [0087] Figure 8 is a flowchart of the operation of the 
new file management apparatus 17 of the file manage- 
ment system according to the fourth embodiment, and 
the operation of an application. In addition, for conven- 
ience in explanation below, the operations of the new 

30 file management apparatus 1 7 and the application A 1 0 
are shown. 

[0088] The new file management apparatus 1 7 and 
the application A 10 operate similarly as in the first 
embodiment. The new file management apparatus 17 

35 authenticates the application A 1 0. If the authentication 
succeeds, the application A 1 0 issues a request through 
the interface 6 to copy the file E accumulated in the first 
accumulation device 2 to the second accumulation 
device 3 to the new file management apparatus 1 7 (step 

40 23 shown in Figure 8). Then, in step 1 1 shown in Figure 

8, before the comparison unit 13 reads the permission 
information about the file E the accounting unit 1B pro- 
vided in the new file management apparatus 1 7 inputs 
and reads the accounting information about copying the 

45 file E from the first accumulation device 2 (step 7 shown 
in Figure 8), and checks whether or not the information 
about a request for a user to be charged a predeter- 
mined fee is added to the accounting information (step 
8 shown in Figure 8). Since the accounting information 

50 about copying the file E is the information about a 
request for a user to be charged the copying fee of 1 000 
yen as shown in Figure 7, the accounting unit 18 dis- 
plays the accounting information on the display 9 
through the interface 6 and the application A 10, and 

55 charges the user 1 000 yen (step 9 shown in Figure 8). 
When the user uses a keyboard, etc. and pays the serv- 
ice provider accounting server 19 1000 yen for the fee 
through the accounting unit 18 and the modem device 
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16, the service provider accounting server 19 outputs 
the information that the fee of 1 000 yen has been paid 
by the user to the accounting unit 18 through the 
modem device 16 (step 10 shown in Figure 8). Then, 
control is passed to step 1 1 shown in Figure 8, and the 
processes In and after step 1 1 are similar to the opera- 
tions according to the first embodiment, 
[0089] Up to this point, the file E is a target file. 
When the file F or G is a target file, the accounting infor- 
mation about a copying operation is the information that 
the user is not charged a fee for copying. Therefore, 
control is passed to step 1 1 after step 8 shown in Figure 
8. Afterwards, the operations similar to those of the first 
embodiment are performed. 

[0090] In addition, according to the above 
described fourth embodiment, the accounting unit 18 
provided in the new file management apparatus 17 
determines the contents of the accounting information. 
If it is the accounting information that the user is 
requested to be charged a predetermined fee, then the 
accounting information is displayed on the display 9. 
However, with the configuration shown in Figure 9, if the 
accounting software 22 of the application A 10 deter- 
mines the contents of the accounting information and 
the information is the information that the user is 
requested to be charged a predetermined fee, the 
accounting information can be displayed on the display 
9 (step 24 shown in Figure 10). In this case, after the 
user pays a predetermined fee through the accounting 
software 22 of the application A to, the application A 10 
outputs the fee payment information to the comparison 
unit 13 of the new file management apparatus 21 (steps 
25, 26, and 9 shown in Figure 10), control is passed to 
step 1 1 shown in Figure 10, and the operation similar to 
the operation in the first embodiment is performed. 
[0091] Furthermore, a variation of the first embodi- 
ment is described in the above described fourth embod- 
iment for convenience in explanation. Such a variation 
can also be applied to the second or third embodiment. 

(Fifth Embodiment) 

[0092] The configuration and the operations of the 
file management system according to a fifth embodi- 
ment of the present invention are described below. 
[0093] The file management system according to 
the fifth embodiment comprises the personal computer 
23, the first accumulation device 2, and the second 
accumulation device 3 as shown in Figure 1 1 . The per- 
sonal computer 23 comprises, in addition to each com- 
ponent unit of the new file management apparatus 7 of 
the personal computer 1, the new tile management 
apparatus 24 having the determination unit 25. The first 
accumulation device 2 accumulates the files H and I dif- 
ferent from the files A and B. The user usage permis- 
sion age information about the display is added to the 
access right information, the permission information, 
the contents data, and the display permission informa- 



tion in the file H as shown in Figure 1 1 . In addition, it is 
assumed that the application C 26 is a program having 
the function of displaying the contents of the file H or I 
on the display 9 
5 [0094] In addition, when the contents of the file H 
are to be displayed on the display 9 after the authentica- 
tion according to the first embodiment has succeeded 
and before the comparison unit 13 provided in the new 
file management apparatus 24 reads the permission 
w information about the file H, the determination unit 25 
inputs the usage permission age information about the 
display of the file H from the first accumulation device 2. 
When the usage permission age information is the infor- 
mation specifying the user usage permission age range, 
is the determination unit 25 receives the information about 
the user age from a user using a keyboard, etc., and 
determines whether or not the age is contained in the 
usage permission age range. Assuming that the user 
age is 25 for convenience in explanation, the age of 25 
20 is contained in the usage permission age range about 
the display of the file H shown in Figure 11, which is 
equal to or higher than 18. Therefore, control is passed 
to the next step 7 shown in Figure 3 described in the first 
embodiment. Then, the operations similar to those 
25 according to the first embodiment are performed. 

[009S] In the explanation above, the age of a user is 
assumed to be 25. When the age of the user is 15, it is 
not contained in the usage permission age range, which 
is equal to or higher than 1 8. Therefore, control is not 
30 passed to any step. 

[0096] The file H has been described above. When 
a target file is the file I, there is no usage permission age 
information about a displaying operation, and the usage 
permission age range is not considered. If an authenti- 
35 cation process is successfully performed, control is 
passed to the next step 7 shown in Figure 3 described 
in the first embodiment. Then, the operations similar to 
those according to the first embodiment are performed. 
[0097] In the above described fifth embodiment, the 
40 case in which the authentication process is successfully 
performed. However, if the process fails, the operations 
described in the first embodiment are performed. 
[0098] In the above described fifth embodiment, the 
determination unit 25 provided in the new file manage- 
rs ment apparatus 24 determines whether or not the age 
of a user is contained in the usage permission age 
range. With the configuration shown in Figure 12, the 
determination software 29 in the application C 26 can 
also determine whether or not the age of a user is con- 
50 tained in the usage permission age range. After the 
determination, when the age of a user is contained in 
the usage permission age range, control is passed to 
step 7 shown in Figure 3 described in the first embodi- 
ment, and the operations described in the first embodi- 
es ment are performed. When the age of the user is not in 
the usage permission age range, control is not passed 
to any step. 

[0099] Furthermore, a variation of the first embodi- 
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ment is described in the above described firth embodi- 
ment for convenience in explanation. Such a variation 
can also be applied to the second or third embodiment. 

(Sixth Embodiment) s 

[0100] The configuration and the operations of the 
file management system according to a sixth embodi- 
ment of the present invention are described below. 
[0101] The file management system according to to 
the sixth embodiment comprises the personal computer 
30, the first accumulation device 2. and the second 
accumulation device 3 as shown in Figure 13. The per- 
sonal computer 30 comprises the interface 31, the first 
file management apparatus 32, and the second file is 
management apparatus 33. The first file management 
apparatus 32 and the second file management appara- 
tus 33 are similar to the new file management apparatus 
7 provided in the file management system according to 
the first embodiment. The first accumulation device 2 20 
accumulates the files J and K. The files J and K contain 
the above described access right information, permis- 
sion information, and the contents data. The second 
accumulation device 3 does not accumulate any file at 
this point. I n addition, the first file management appara- 25 
tus 32 is connected to the first accumulation device 2, 
and the second file management apparatus 33 is con- 
nected to the second accumulation device 3. The appli- 
cation D 34 is a program having the function of 
displaying the contents of the file accumulated in the 30 
first accumulation device 2 or the second accumulation 
device 3 on the display 9. 

[0102] First, the first file management apparatus 32 
encrypts and adds to the file J and K accumulated in the 
first accumulation device 2 a 'DiskT as a non-rewritable as 
identification value (ID) specific to the first accumulation 
device 2 for designation that the files J and K are accu- 
mulated in the first accumulation device 2 as shown in 
Figure 13. Furthermore, the first file management appa- 
ratus 32 reads the file J or K to which the identification 10 
value 'Diskl' is added. 

[0103] Then, it is assumed that the files J and K 
accumulated in the first accumulation device 2 are ille- 
gally copied to the second accumulation device 3 and 
accumulated therein through a disclosed interface such 45 
as SCSI or the like without through the first file manage- 
ment apparatus 32 and the second file management 
apparatus 33. 

[0104] The purpose of the sixth embodiment is to 
prevent the accumulated files J and K from being ille- so 
gaily copied for use to the second accumulation device 

3. 

[0105] The usage of the file J accumulated in the 
first accumulation device 2 is described below. For con- 
venience in explanation, the display of the contents of 55 
the file J on the display 9 by the application D 34 is used. 
[0106] The user issues an instruction to the per- 
sonal computer 30 to display the contents of the file J 



accumulated in the first accumulation device 2 on the 
display 9. Then, the first file management apparatus 32 
connected to the first accumulation device 2 checks the 
validity of the user as described in the first embodiment 
(step 1 shown in Figure 14). When the validity of the 
user is checked, the first file management apparatus 32 
inputs an access request from the application D 34 
(step 2 shown in Figure 14), inputs and reads an identi- 
fication value (ID) of the first accumulation device 2, that 
is, a 'Diskl,' inputs and reads an identification value 
added to the file J from the first accumulation device 2, 
and decodes the encrypted identification value (step 3 
shown in Figure 14). Furthermore, the first file manage- 
ment apparatus 32 determines whether or not the 
decoded identification value matches the 'Diskl ' (step 4 
shown in Figure 14). As described above, since the 
identification value added to the file J is 'Diskl,' il is 
determined that a matching result is obtained (step 4 
shown in Figure 14). After it is determined that a match- 
ing result is obtained, control is passed to step 5 shown 
in Figure 14, that is, to step 3 shown in Figure 3 
described in the first embodiment. Afterwards, the oper- 
ations described in the first embodiment are performed. 
The explanation about the operations is omitted here. 
[0107] The target file described above has been 
described as the file J. Although the target file can be 
the file K, the file K is accumulated in the first accumula- 
tion device 2 and the identification value 'Diskl ' is 
added- Therefore, the operations similar to those 
described about the file J are performed. 
[0108] Described below is the usage of the file J 
accumulated in the second accumulation device 3. It is 
assumed that the usage is to display the contents of the 
file J by the application D 34 on the display 9. 
[0109] First, the user issues an instruction to the 
personal computer 30 to display the contents of the file 
J accumulated in the second accumulation device 3 on 
the display 9. Then, the second file management appa- 
ratus 33 connected to the second accumulation device 
3 checks the validity of the user as described above 
(step 1 shown in Figure 14). When the validity of the 
user is checked, the second file management apparatus 
33 inputs an access request from the application D 34 
(step 2 shown in Figure 14), inputs and reads an identi- 
fication value (ID) of the second accumulation device 3, 
that is, a 'Disk2,' inputs and reads an identification value 
added to the file J from the second accumulation device 
3, and decodes the encrypted identification value (step 

3 shown in Figure 14). Furthermore, the second file 
management apparatus 33 determines whether or not 
the decoded identification value matches the 'Disk2' 
(step 4 shown in Figure 14). As described above, since 
the identification value added to the file J is 'Diskl,' it is 
determined that a non-matching result is obtained (step 

4 shown in Figure 14). Thus, if it is determined that a 
non-matching result is output, the second file manage- 
ment apparatus 33 terminates the operations. 
[0110] The target file described above has been 
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described ae the file J. Although the target file can be 
the file K, the file K is accumulated in the second accu- 
mulation device 3 and the identification value 'DiskV is 
added. Therefore, the identification values do not 
match. As a result, the second file management appara- 5 
tus 33 terminates the operations. 
[0111] As described above, the first file manage- 
ment apparatus 32 and the second file management 
apparatus 33 prevent the files illegally copied and accu- 
mulated from being used. 10 
[0112] According to the above described sixth 
embodiment, as shown in Figure 13, the personal com- 
puter 30 comprises the Interface 31 , the first file man- 
agement apparatus 32, and the second file 
management apparatus 33. However, as shown in Fig- 15 
ure 15, the personal computer 35 comprising the inter- 
face 31 and the third file management apparatus 36 can 
replace the personal computer 30. At this time, it is 
assumed that the third file management apparatus 36 is 
connected to the first accumulation device 2 and the 20 
second accumulation device 3. In this case, when the 
files J and K accumulated in the first accumulation 
device 2 are illegally copied to the second accumulation 
device 3, and accumulated, the files J and K illegally 
accumulated in the second accumulation device 3 can 2s 
be prevented from being used by the third file manage- 
ment apparatus 36 performing the operations similar lo 
those of the second file management apparatus 33. 
That is, when the third file management apparatus 36 
compares the identification value of the second accu- 30 
mulatlon device 3 with the identification value added to 
the file J or K. Only when a matching result is output, the 
file J or K is used, thereby preventing the file J or K ille- 
gally accumulated by the second accumulation device 3 
from being used. 35 
[0113] According to the above described sixth 
embodiment shown in Figure 13, the first file manage- 
ment apparatus 32, the second file management appa- 
ratus 33, the first accumulation device 2, and the 
second accumulation device 3 are used, but the number 40 
of the file management apparatuses and the accumula- 
tion devices is not limited to the value described above. 
However, each file management apparatus has to be 
connected to a corresponding accumulation device. 
Furthermore, in Figure 15, the third file management 45 
apparatus 36, the first accumulation device 2, and the 
second accumulation device 3 are used, but Ihe number 
of the accumulation devices is not limited to the above 
described value. However, the third file management 
apparatus 36 has to be connected to each accumulation so 
device. 

[0114] All or a part of the units and the components 
of the new file management apparatuses 7, 17, 21, 24, 
and 28, the first file management apparatus 32, the sec- 
ond file management apparatus 33, and the third file 55 
management apparatus 36 according to the above 
described first through sixth embodiments can be hard- 
ware and software having the function of the hardware. 
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[01 1 5] The present invention relates to a program 
storage medium storing a program for directing a com- 
puter to execute each of the functions of all or a part of 
the units and the components of the new file manage- 
ment apparatuses 7, 17, 21 , 24, and 28, the first file 
management apparatus 32, the second file manage- 
ment apparatus 33, and the third file management 
apparatus 36 according to the above described first 
through sixth embodiments. 

Industrial Applicability 

[0116] As described above, the present invention 
can provide a file management apparatus for process- 
ing a file with the permission information taken into 
account, a file management system provided with the 
file management apparatus, and a file management 
method. 

[0117] That is, the present invention can provide a 
file management apparatus for preventing a file for 
which an author has a copyright to be protected from 
being displayed, copied, moved, backed up and/or proc- 
essed without permission of the author, a file manage- 
ment system provided with the file management 
apparatus, and a file management method. 
[01 18] In addition, the present invention can provide 
a file management apparatus for controlling the proc- 
esses divided into the processes of displaying, copying, 
moving, backing up and/or processing a file, and realiz- 
ing both preventing illegal access and file convenience, 
the file management system provided with the file man 
agement apparatus, and a file management method. 

Claims 

1 . A file management system, comprising: 

an accumulation device accumulating a file to 
which information about process restriction on 
the file is added; and 

a file management apparatus performing an 
input/output process on the file, in considera- 
tion of a request for a process from an applica- 
tion accessing said file management system 
and, according to the information about proc- 
ess restriction added to the file, characterized 
in that 

said file management apparatus compares the 
information about process restriction added to 
the file in said accumulation device with 
request contents of a process on the file front 
said application, determines whether or not the 
process should be performed on the file, inputs 
the file from said accumulation device based 
on the result, and outputs the file to the applica- 
tion. 

2. The file management system according to claim 1 , 
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characterized in that: 

said file management apparatus and said 
application comprise authentication units; 
one of the authentication units performs an s 
authentication process with another authenti- 
cation unit; 

said authentication unit of said file manage- 
ment apparatus checks whether or not said 
application is authenticated; io 
when the application is authenticated as a 
result of the authentication process, said file 
management apparatus determines whether or 
not application can process the file; and 
when the application is not authenticated as a is 
result of the authentication process, said file 
management apparatus does not accept the 
request to process the file from the application. 

3. The file management system according to claim 1 , 20 
characterized in that: 

said file management apparatus and said 
application comprise authentication units; 
one of the authentication units performs an zs 
authentication process with another authenti- 
cation unit; 

said authentication unit of said file manage- 
ment apparatus checks whether or not said 
application is authenticated; 30 
when the application is authenticated as a 
result of the authentication process, said file 
management apparatus determines whether or 
not application can process the file; and 
when the application is not authenticated as a 35 
result of the authentication process, said file 
management apparatus reads all or a part of 
the information about process restriction added 
to the file in said accumulation device, and 
determines whether or not the application can 40 
process the file according to the read informa- 
tion. 

4. The file management system according to any one 

of claims 1 through 3, characterized in that: 45 

there are a plurality of processes to be per- 
formed on the file; 

said information about process restriction on so 
the file independently exists for each process; 



cation with the information about process 
restriction corresponding to the process, and 
determines whether or not the application can 
process the file. 

5. The file management system according to claim 3 
or 4, characterized in that: 

when the application is not authenticated, 
said file management apparatus inputs the file 
from said accumulation device and outputs the 
file to the application when all of the read infor- 
mation indicates that the file can be processed; 

said file management apparatus does not 
accept the request to process the file from the 
application when any of the read information 
indicates that said (ile cannot be processed. 

6. The file management system according to any one 
of claims 1 through 5, characterized in that: 

said information about process restriction on 
the file refers to one of or a combination of 
information for determination as to whether or 
not the process can not include storing the file 
on a data storage medium accessing said file 
management system, information for determi- 
nation as to whether or not the file can be cop- 
ied, information for determination as to whether 
or not the file can be moved, information for 
determination as to whether or not the file can 
be backed up, and information for determina- 
tion of whether or not the file can be processed. 

7. The file management system according to claim 6, 
characterized in that said information about proc- 
ess restriction on the file contains information spec- 
ifying a generation of the file to be copied. 

8. The file management system according to claim 6 
or 7, characterized in that said information about 
process restriction on the file contains information 
specifying a date when the file can be copied or 
moved. 

9. The file management system according to any one 
of claims 1 through B, characterized in that: 

said information about process restriction on 
the file contains accounting information for 
each process; 

said file management apparatus reads the 
accounting information corresponding to the 
process before determining whether or not the 
process can be performed by the application 
on the file when the application is authenti- 
cated; 



said information about process restriction for 
the each process is independently added to the 
file; 

said file management apparatus compares the 
request contents of the process from the appli- 
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when the accounting information indicates that 
a predetermined fee is required for the corre- 
sponding process, a user of the file manage- 
ment system is charged the predetermined fee; 
said corresponding process is permitted after s 
the predetermined fee is paid to a manager of 
the file; and 

when the accounting information indicates that 
a predetermined fee is not required for the cor- 
responding process, the accounting informa- 10 
tion is not considered, and it is determined 
whether or not the process can be performed 
by the application on the file. 

10. The file management system according to any one is 
of claims 1 through 8, characteri2ed in that 

said information about process restriction on 
the file contains accounting information for 
each process; 20 
said application inputs the accounting informa- 
tion corresponding to the process before said 
file management apparatus determines 
whether or not the process can be performed 
by the application on the file when the applica- 25 
tion Is authenticated; 

when the accounting information indicates that 
a predetermined fee is required for the corre- 
sponding process, a user of the file manage- 
ment system is charged the predetermined fee; so 
said file management apparatus permits the 
corresponding process to be performed after 
the predetermined fee is paid to a manager of 
the file; and 

when the accounting information indicates that 3S 
a predetermined fee is not required for the cor- 
responding process, said file management 
apparatus does not consider the accounting 
information, and it is determined whether or not 
the process can be performed by the applica- 40 
tion on the file. 

11. The file management system according to any one 
of claims 1 through 8, characterized in that: 

45 

said information about process restriction on 
the file contains usage permission age infor- 
mation about a user of the file management 
system for each process; 

said file management apparatus reads the so 
usage permission age information correspond- 
ing to the process before determining whether 
or not the process can be performed by the 
application on the file when the application is 
authenticated, ss 
when the usage permission age information 
specifies a usage permission age range of the 
user, it is determined whether or not the user 
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age is in the usage permission age range, and 
it is determined whether or not the process can 
be performed by the application on the file 
when the age is in the range; and 
when the usage permission age information 
does not specify the usage permission age 
range of the user, the usage permission age 
information is not considered, and it is deter- 
mined whether or not the process can be per- 
formed by the application on the file. 

12. The file management system according to any one 
of claims 1 through 8, characterized in that 

said information about process restriction on 
the file contains usage permission age infor- 
mation about a user of the file management 
system for each process; 
said application inputs the usage permission 
age information corresponding to the process 
before said file management apparatus deter- 
mines whether or not the application can proc- 
ess the file when the application is 
authenticated; 

when the usage permission age information 
specifies a usage permission age range of the 
user, it is determined whether or not the user 
age is in the usage permission age range, and 
said file management apparatus determines 
whether or not the process can be performed 
by the application on the file when the age is in 
the range; and 

when the usage permission age information 
does not specify the usage permission age 
range of the user, said file management appa- 
ratus does not consider the usage permission 
age information, and determines whether or 
not the process can be performed by the appli- 
cation on the file. 

13. A program storage medium storing a program of an 
application used in the file management system 
according to any one of claims 1 through 12. 

14. A file management apparatus, characterized by 
comprising: 

a comparison unit comparing information about 
process restriction on a file in an accumulation 
device connected to the file management 
apparatus with request contents of a process 
on the file front the application accessing the 
file management apparatus; and 
an input/output unit determining whether or not 
the file can be processed based on a compari- 
son result of said comparison unit, and input- 
ting the file from said accumulation device and 
outputting the file to the application based on 
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the result 

15. The file management apparatus according to claim 
14, characterized in that: 

said file management apparatus comprises an 
authentication unit; 

said authentication unit and an authentication 
unit of the application perform an authentica- 
tion process with each other: u> 
said authentication unit of the file management 
apparatus checks whether or not the applica- 
tion can be authenticated; 
when the application is authenticated as a 
result of the authentication process, said com- is 
parison unit performs the comparison process, 
and said input/output unit determines whether 
or not the application can process the file ; and 
when the application is not authenticated as a 
result of the authentication process, said com- 20 
parison unit does not accept the request to 
process the file from the application, and does 
not perform the comparison process. 

16. The file management apparatus according to claim 25 
14, characterized in that: 

said file management apparatus comprises an 
authentication unit; 

said authentication unit and an authentication 30 
unit of the application perform an authentica- 
tion process with each other; 
said authentication unit of the file management 
apparatus checks whether or not the applica- 
tion can be authenticated; 35 
when the application is authenticated as a 
result of the authentication process, said com- 
parison unit performs the comparison process, 
and said input/output unit determines whether 
or not the application can process the file ; and 40 
when the application is not authenticated as a 
result of the authentication process, said com- 
parison unit reads all or a part of the informa- 
tion about process restriction added to the file 
in said accumulation device, and said input/out- 45 
put unit determines whether or not the applica- 
tion can process the file according to the read 
information. 

17. The file management apparatus according to any so 
one of claims 14 through 1 6, characterized in that 

there are a plurality of processes to be per- 
formed on the file; 

said information about process restriction on 55 
the file independently exists for each process; 
said the information about process restriction 
for the each process is independently added to 
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the data; 

said comparison unit compares the request 
contents of the process from the application 
with the information about process restriction 
corresponding to the process. 

18. The file management apparatus according to claim 
16, characterized in that: 

when the application is not authenticated, said 
input/output unit inputs the file front said accu- 
mulation device and outputs the file to the 
application when all of the read information 
indicates that the file can be processed; and 
said input/output unit does not input the file 
from said accumulation device, and does not 
output the file to the application when any of 
the read information indicates that a file cannot 
be processed. 

19. The file management apparatus according to any 
one of claims 14 through 1B, characterized in that 

said information about process restriction on 
the file refers to one of or a combination of 
information for determination as to whether or 
not the process cannot include storing the file 
on a data storage medium accessing the file 
management apparatus, information for deter- 
mination as to whether or not the file can be 
copied, information for determination as to 
whether or not the file can be moved, informa- 
tion for determination as to whether or not the 
file can be backed up, and information for 
determination of whether or not the file can be 
processed. 

20. The file management apparatus according to claim 
19. characterized in that said information about 
process restriction on the file contains information 
specifying a generation of the file to be copied. 

21. The lile management apparatus according to claim 
19 or 20, characterized in that said information 
about process restriction on the file contains infor- 
mation specifying a date of copying or moving the 
file. When the file can be copied or moved. 

22. The file management apparatus according to any 
one of claims 1 4 through 21 , characterized in that: 

said information about process restriction on 
the file contains accounting information for 
each process; 

said file management apparatus comprises an 
accounting unit for performing an accounting 
process according to the accounting informa- 
tion; 
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said accounting unit reads the accounting infor- 
mation corresponding to the process using said 
input/output unit before determining whether or 
not the process can be performed by the appli- 
cation on the file when the application is 5 
authenticated by the authentication unit; 
when the accounting information indicates that 
a predetermined fee is required for the corre- 
sponding process, said accounting unit 
charges a user of the file management appara- 10 
tus the predetermined fee, and then said 
input/output unit permits the corresponding 
process after the predetermined fee is paid to 
the file manager; and 

when the accounting information indicates that is 
a predetermined fee is not required for the cor- 
responding process, said input/output unit 
does not consider the accounting Information, 
and determines whether or not the process can 
be performed by the application on the file. 20 

23. The file management apparatus according to any 
one of claims 14 through 21 , characterized in that: 

said information about process restriction on 25 
the file contains accounting information for 
each process, 

said file management apparatus passes the 
accounting information to the authenticated 30 
application; 

when the accounting information indicates that 
a predetermined fee is required for the corre- 
sponding process, said input/output unit per- 35 
mits the corresponding process after a user of 
the file management apparatus pays the pre- 
determined fee to the file manager; 

when the accounting information indicates that to 
a predetermined fee is not required for the cor- 
responding process, said input/output unit 
does not consider the accounting information, 
and determines whether or not the process can 
be performed by the application on the file. 45 

24. The file management apparatus according to any 
one of claims 1 4 through 21 , characterized in that: 

said information about process restriction on so 
the file contains usage permission age infor- 
mation about a user of the file management 
apparatus for each process; 
said file management apparatus comprises a 
determination unit for performing a predeter- 55 
mined process according to the usage permis- 
sion age information, and, when the 
authentication unit authenticates the applica- 



said determination unit reads the usage per- 
mission age information corresponding to the 
process before said input/output unit deter- 
mines whether or not the process on the file 
can be performed by the application; 
when the usage permission age information 
specifies a usage permission age range of the 
user, said determination unit determines 
whether or not the user age is in the usage per- 
mission age range, and said input/output unit 
permits the corresponding process when the 
age is in the range; and 
when the usage permission age information 
does not specify the usage permission age 
range of the user, said inpul/output unit does 
not consider the usage permission age infor- 
mation, and determines whether or not the 
process can be performed by the application 
on the file. 

25. The file management apparatus according to any 
one of claims 14 through 21 , characterized in that 

said information about process restriction on 
the file contains usage permission age infor- 
mation about a user of the file management 
apparatus for each process; 
said file management apparatus passes the 
usage permission age information to the 
authenticated application; 
when the usage permission age information 
specifies the usage permission age range of 
the user, and when the application determines 
that the user age is in the usage permission 
age range, said input/output unit permits the 
corresponding process; and 
when the usage permission age information 
does not specify the usage permission age 
range of the user, said input/output unit does 
not consider the usage permission age infor- 
mation, and determines whether or not the 
process can be performed by the application 
on the file. 

26. A program storage medium, characterized by stor- 
ing a program for directing a computer to perform all 
or a part of each function of each component of the 
file management apparatus according to any one of 
claims 1 4 through 25. 

27. A file management system, comprising plural sets 
of: 

an accumulation device accumulating a file to 
which information about process restriction on 
the file is added; and 

a file management apparatus performing an 



35 



EP 1 071 017 A1 



input/output process on the file in consideration 
of a request for a process from an application 
accessing said file management system 3 
according to the information about process 
restriction added to the file, characterized in 5 
that, 

said file management apparatus encrypts and 
adds to the file in a corresponding accumula- 
tion device a non-rewritable identification value 
specific to the accumulation device for specify- 10 
ing the corresponding accumulation device, 
and reads only the file to which the identifica- 
tion value of the corresponding accumulation 
device is added. 

28. A file management system, comprising: 

a plurality of accumulation devices accumulat- 
ing a file to which information about process 
restriction on the file is added; and 20 I 

a file management apparatus performing an 
input/output process on the file in consideration 
of a request for a process from an application 
accessing said file management system 
according to the information about process 2s 
restriction added to the file, characterized in 
that 

said file management apparatus encrypts and 
adds to the file accumulated in each of the plu- 
rality of accumulation devices a non-rewritable 30 
identification value specific to the accumulation 
device for specifying a corresponding accumu- 
lation device, and reads only the file accumu- 
lated in an accumulation device corresponding 
to an added identification value. 35 

29. A file management apparatus, characterized in that 
to a file in an accumulation device connected to the 
file management apparatus, a non-rewritable iden- 
tification value specific to the accumulation device to 
for specifying the accumulation device is encrypted 
and added, and only the file to which the identifica- 
tion value of the accumulation device is added is 
read. 

45 

30. A file management apparatus, characterized in that 
to a file accumulated in each of a plurality of accu- 
mulation devices connected to the file management 
apparatus, a non-rewritable identification value 
specific to the accumulation device for specifying so 
the corresponding accumulation device is 
encrypted and added, and only the file accumu- 
lated in the accumulation device corresponding to 

an added identification value is read. 

31 . A program storage medium storing a program for 
directing a computer to perform all or a part of each 
function of the file management apparatus accord- 



ing to claim 29 or 30. 

. A file management method, characterized by com- 
prising the steps of: 

comparing information about process restric- 
tion on a file in an accumulation device accu- 
mulating the file to which the information about 
process restriction on the file is added with 
request contents of a process of the file from an 
application accessing the file management 
system; 

determining whether or not the process can be 
performed on the file based on the comparison; 
and 

inputting the file from said accumulation device 
based on the result, and outputting the file to 
the application. 

I. A file management method, characterized by the 
steps of: 

encrypting and adding a non-rewritable identifi- 
cation value specific to an accumulation device 
for specifying the accumulation device to a file 
in the accumulation device accumulating files; 
and 

reading only the file to which the identification 
value of said accumulation device is added. 34. 
A file management method, characterized by 
comprising the steps of: 
encrypting and adding a non-rewritable identifi- 
cation value specific to an accumulation device 
for specifying the accumulation device corre- 
sponding to a file accumulated in each of a plu- 
rality of accumulation devices accumulating 
files; and 

reading only the file accumulated in an accu- 
mulation device corresponding to an added 
identification value. 
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